<!-- ruleid: stored-xss -->
<h2>{{ username }}</h2>